mirror of
https://github.com/GSA/notifications-admin.git
synced 2026-08-03 21:21:14 -04:00
Validation of the code is done in the form, when the form.validate_on_submit is called the validate code methods are called as well.
145 lines
6.6 KiB
Python
145 lines
6.6 KiB
Python
from flask import json
|
|
|
|
from app.main.dao import users_dao
|
|
from app.main.encryption import hashpw
|
|
from tests.app.main.views import create_test_user
|
|
|
|
|
|
def test_should_return_verify_template(notifications_admin, notifications_admin_db):
|
|
response = notifications_admin.test_client().get('/verify')
|
|
assert response.status_code == 200
|
|
assert 'Activate your account' in response.get_data(as_text=True)
|
|
|
|
|
|
def test_should_redirect_to_add_service_when_code_are_correct(notifications_admin, notifications_admin_db):
|
|
with notifications_admin.test_client() as client:
|
|
with client.session_transaction() as session:
|
|
user = create_test_user()
|
|
session['user_id'] = user.id
|
|
session['sms_code'] = hashpw('12345')
|
|
session['email_code'] = hashpw('23456')
|
|
response = client.post('/verify',
|
|
data={'sms_code': '12345',
|
|
'email_code': '23456'})
|
|
assert response.status_code == 302
|
|
assert response.location == 'http://localhost/add-service'
|
|
|
|
|
|
def test_should_activate_user_after_verify(notifications_admin, notifications_admin_db):
|
|
with notifications_admin.test_client() as client:
|
|
with client.session_transaction() as session:
|
|
user = create_test_user()
|
|
session['user_id'] = user.id
|
|
session['sms_code'] = hashpw('12345')
|
|
session['email_code'] = hashpw('23456')
|
|
client.post('/verify',
|
|
data={'sms_code': '12345',
|
|
'email_code': '23456'})
|
|
|
|
after_verify = users_dao.get_user_by_id(user.id)
|
|
assert after_verify.state == 'active'
|
|
|
|
|
|
def test_should_return_400_when_sms_code_is_wrong(notifications_admin, notifications_admin_db):
|
|
with notifications_admin.test_client() as client:
|
|
with client.session_transaction() as session:
|
|
user = create_test_user()
|
|
session['user_id'] = user.id
|
|
session['sms_code'] = hashpw('12345')
|
|
session['email_code'] = hashpw('23456')
|
|
response = client.post('/verify',
|
|
data={'sms_code': '98765',
|
|
'email_code': '23456'})
|
|
assert response.status_code == 400
|
|
assert {'sms_code': ['Code does not match']} == json.loads(response.get_data(as_text=True))
|
|
|
|
|
|
def test_should_return_400_when_email_code_is_wrong(notifications_admin, notifications_admin_db):
|
|
with notifications_admin.test_client() as client:
|
|
with client.session_transaction() as session:
|
|
user = create_test_user()
|
|
session['user_id'] = user.id
|
|
session['sms_code'] = hashpw('12345')
|
|
session['email_code'] = hashpw('98456')
|
|
response = client.post('/verify',
|
|
data={'sms_code': '12345',
|
|
'email_code': '23456'})
|
|
assert response.status_code == 400
|
|
assert {'email_code': ['Code does not match']} == json.loads(response.get_data(as_text=True))
|
|
|
|
|
|
def test_should_return_400_when_sms_code_is_missing(notifications_admin, notifications_admin_db):
|
|
with notifications_admin.test_client() as client:
|
|
with client.session_transaction() as session:
|
|
user = create_test_user()
|
|
session['user_id'] = user.id
|
|
session['sms_code'] = hashpw('12345')
|
|
session['email_code'] = hashpw('98456')
|
|
response = client.post('/verify',
|
|
data={'email_code': '98456'})
|
|
assert response.status_code == 400
|
|
assert {'sms_code': ['SMS code can not be empty']} == json.loads(response.get_data(as_text=True))
|
|
|
|
|
|
def test_should_return_400_when_email_code_is_missing(notifications_admin, notifications_admin_db):
|
|
with notifications_admin.test_client() as client:
|
|
with client.session_transaction() as session:
|
|
user = create_test_user()
|
|
session['user_id'] = user.id
|
|
session['sms_code'] = hashpw('23456')
|
|
session['email_code'] = hashpw('23456')
|
|
response = client.post('/verify',
|
|
data={'sms_code': '23456'})
|
|
assert response.status_code == 400
|
|
assert {'email_code': ['Email code can not be empty']} == json.loads(response.get_data(as_text=True))
|
|
|
|
|
|
def test_should_return_400_when_email_code_has_letter(notifications_admin, notifications_admin_db):
|
|
with notifications_admin.test_client() as client:
|
|
with client.session_transaction() as session:
|
|
user = create_test_user()
|
|
session['user_id'] = user.id
|
|
session['sms_code'] = hashpw('23456')
|
|
session['email_code'] = hashpw('23456')
|
|
response = client.post('/verify',
|
|
data={'sms_code': '23456',
|
|
'email_code': 'abcde'})
|
|
assert response.status_code == 400
|
|
data = json.loads(response.get_data(as_text=True))
|
|
expected = {'email_code': ['Code does not match', 'Code must be 5 digits']}
|
|
assert len(data.keys()) == 1
|
|
assert 'email_code' in data
|
|
assert data['email_code'].sort() == expected['email_code'].sort()
|
|
|
|
|
|
def test_should_return_400_when_sms_code_is_too_short(notifications_admin, notifications_admin_db):
|
|
with notifications_admin.test_client() as client:
|
|
with client.session_transaction() as session:
|
|
user = create_test_user()
|
|
session['user_id'] = user.id
|
|
session['sms_code'] = hashpw('23456')
|
|
session['email_code'] = hashpw('23456')
|
|
response = client.post('/verify',
|
|
data={'sms_code': '2345',
|
|
'email_code': '23456'})
|
|
assert response.status_code == 400
|
|
data = json.loads(response.get_data(as_text=True))
|
|
expected = {'sms_code': ['Code must be 5 digits', 'Code does not match']}
|
|
assert len(data.keys()) == 1
|
|
assert 'sms_code' in data
|
|
assert data['sms_code'].sort() == expected['sms_code'].sort()
|
|
|
|
|
|
def test_should_return_302_when_email_code_starts_with_zero(notifications_admin, notifications_admin_db):
|
|
with notifications_admin.test_client() as client:
|
|
with client.session_transaction() as session:
|
|
user = create_test_user()
|
|
session['user_id'] = user.id
|
|
session['sms_code'] = hashpw('23456')
|
|
session['email_code'] = hashpw('09765')
|
|
response = client.post('/verify',
|
|
data={'sms_code': '23456',
|
|
'email_code': '09765'})
|
|
assert response.status_code == 302
|
|
assert response.location == 'http://localhost/add-service'
|